← CVE Intelligence

CVE-2023-4782

Terraform Allows Arbitrary File Write During Init Operation PUBLISHED

Description (CNA)

Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7.

Affected (CNA)

Vendor / productVersions
HashiCorp / Terraformaffected 1.0.8 before 1.5.7

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.